This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: E88jlBzg0WiKwN+ednJQyzkvyy4gLL2sHyTdPL5c/3Q= Subject key identifier: 9B:64:5F:4D:7F:4C:49:03:9D:F2:8A:2C:BA:FE:E2:10:14:D4:40:41 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B3AC6E85DB82902F9706CABD4100782EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 0181 Signing time: Sat 20 Dec 2025 08:01:12 +0000 Manifest this update: Sat 20 Dec 2025 08:01:12 +0000 Manifest next update: Sun 21 Dec 2025 08:01:12 +0000 Files and hashes: 1: 087UupeobRWZv5Tg2oEF0C56iBA.roa (hash: zWP3Bk5tOFSv0zyFnnjB/V+owp0c/zcYuM6L9hK4AdI=) 2: 3k17-uWuUEzIQWTV_aVrN2V9Ofg.roa (hash: lbMYwlKT8p0c2RnTCHNjGMo+pJEqRoXVFA94xVV3t/E=) 3: Bfi6-xQT04yN66u_rQS1r7flXkU.roa (hash: PJBuPraxMMA88Mc0/9rfamS2pUKaPReKLKV0byRzJ3U=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: rNwYc8vD9Cqr/vV2ioZ5GDDG5Meq9stFC6UTt7KEhqI=) 5: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (hash: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=) 6: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (hash: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=) 7: TAbKgUyv1M2o14k63ItFm954szQ.roa (hash: 0s5M02Od9+2ZIHBPyatRe7MUX/RFakfKEZMoY/+NOmo=) 8: c7AbeDnubEdSzki1kwWbICvIk8E.roa (hash: fcaXTow20RRwggzf+hnsUA2yEMqaH1V5vdraV6mEYMA=) 9: eTWaJF1jcP1FVrHZa6cVmzIJVbg.roa (hash: bcxESYuVYuSLDJzSWqEVRgmG4yGHvDtFkg4deBqL9ZA=) 10: ji-mlSpBC_ldO2fH2xoveSznohQ.roa (hash: y40m1DQahvtjZ0nXGs/iy40JwpshjeqdE7p40jR78SQ=) 11: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (hash: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=) 12: q980DZSkE5Qn7ArpF9csEKjlkQ4.roa (hash: kpNR/NWQa7mqrmGvQZLHhcKdp0yiHUbzVPv9O+jM+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:e8:5d:b8:29:02:f9:70:6c:ab:d4:10:07:82:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Dec 20 08:01:12 2025 GMT Not After : Dec 21 08:01:12 2025 GMT Subject: CN=9b645f4d7f4c49039df28a2cbafee21014d44041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:2f:a8:05:dd:3d:e5:66:da:85:48:ba:7c: b7:e4:7d:03:48:cc:c8:38:fe:51:a9:a2:32:ad:d3: 23:49:4f:a1:3d:fe:43:29:60:63:21:75:dc:f8:a3: 42:53:21:78:e1:fb:8a:27:bd:24:c7:5e:5f:d9:b9: 9c:ff:b3:bb:65:6b:47:3a:9f:7c:38:4d:74:71:d9: 36:ca:0e:bb:56:5a:57:c9:3e:2b:f4:56:64:ed:53: 90:5c:b2:04:6a:f1:66:fa:86:32:af:eb:86:58:e7: b0:d0:06:56:cf:a2:94:c3:f3:01:b1:de:cc:91:ad: f2:08:0e:f7:fd:50:23:41:7c:15:3e:64:42:ce:7f: 16:01:0d:f5:8f:a3:3f:5a:22:57:b8:f7:f7:54:fe: 6c:b8:d7:aa:37:36:f3:12:4e:3b:c1:dd:b6:c9:32: 17:3c:58:95:d5:06:61:f0:cd:8f:2a:39:1e:6c:fe: ae:ee:da:67:61:f6:e6:3b:88:c7:b7:51:35:4d:b9: 72:49:ce:25:b3:2c:f1:51:dd:e9:46:4d:d8:9c:a5: 1a:71:18:a2:5c:9b:0e:fd:91:f1:ee:c1:c6:4e:19: 6a:95:a7:ae:61:6a:e2:49:00:2c:fa:e2:05:eb:5d: e9:ab:cc:c7:45:8a:ef:27:81:3f:0e:d1:a9:13:52: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:64:5F:4D:7F:4C:49:03:9D:F2:8A:2C:BA:FE:E2:10:14:D4:40:41 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:4b:42:96:47:9f:b3:ae:d6:58:20:af:93:2b:14:bc:12: 7b:b6:54:d6:d9:73:6d:1b:74:b2:8c:eb:ac:c7:7a:2a:9b:00: 88:c3:75:87:ba:87:dd:4b:41:bb:a0:4f:31:82:c6:2f:42:69: 80:c8:8f:2f:e1:82:20:0c:f4:a9:a0:13:a3:d1:13:a9:49:0a: 4b:c0:2c:06:34:f0:23:5a:98:bb:62:9b:c7:91:f1:ac:43:76: 18:75:5b:a6:d2:63:ff:90:19:21:73:36:4b:51:05:8e:61:45: ca:eb:b8:5b:a0:db:2a:fd:de:68:c2:73:bc:2c:c8:4f:82:71: 7b:10:51:f1:98:4d:63:0f:ea:dc:8a:b4:a6:79:fa:72:a0:95: 08:0a:26:fb:8b:ce:9b:dd:f7:2d:fb:fd:f2:43:df:ea:39:0e: 01:b1:34:cf:51:1b:a1:71:a6:ba:97:e4:e1:d9:0c:78:80:58: d4:bc:2a:fc:d1:78:19:4f:8f:bd:fd:6b:3e:b4:2d:60:db:a5: 03:67:33:33:2e:70:2e:f4:0e:26:95:cf:7a:eb:27:cf:07:6c: 7e:05:cd:8d:eb:df:1f:9d:a9:03:e2:32:f9:1b:25:af:4d:2b: 30:2d:4b:76:c9:4a:c7:84:03:b1:2e:90:6a:3e:18:f7:f3:0d: 60:04:04:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xuhduCkC+XBsq9QQB4LuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUxMjIwMDgwMTEyWhcNMjUxMjIxMDgwMTEyWjAzMTEwLwYDVQQD Eyg5YjY0NWY0ZDdmNGM0OTAzOWRmMjhhMmNiYWZlZTIxMDE0ZDQ0MDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hcvqAXdPeVm2oVIuny35H0DSMzI OP5RqaIyrdMjSU+hPf5DKWBjIXXc+KNCUyF44fuKJ70kx15f2bmc/7O7ZWtHOp98 OE10cdk2yg67VlpXyT4r9FZk7VOQXLIEavFm+oYyr+uGWOew0AZWz6KUw/MBsd7M ka3yCA73/VAjQXwVPmRCzn8WAQ31j6M/WiJXuPf3VP5suNeqNzbzEk47wd22yTIX PFiV1QZh8M2PKjkebP6u7tpnYfbmO4jHt1E1TblySc4lsyzxUd3pRk3YnKUacRii XJsO/ZHx7sHGThlqlaeuYWriSQAs+uIF613pq8zHRYrvJ4E/DtGpE1JOqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtkX01/TEkDnfKKLLr+4hAU1EBBMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXtLQpZH n7Ou1lggr5MrFLwSe7ZU1tlzbRt0sozrrMd6KpsAiMN1h7qH3UtBu6BPMYLGL0Jp gMiPL+GCIAz0qaATo9ETqUkKS8AsBjTwI1qYu2Kbx5HxrEN2GHVbptJj/5AZIXM2 S1EFjmFFyuu4W6DbKv3eaMJzvCzIT4JxexBR8ZhNYw/q3Iq0pnn6cqCVCAom+4vO m933Lfv98kPf6jkOAbE0z1EboXGmupfk4dkMeIBY1Lwq/NF4GU+Pvf1rPrQtYNul A2czMy5wLvQOJpXPeusnzwdsfgXNjevfH52pA+Iy+Rslr00rMC1LdslKx4QDsS6Q aj4Y9/MNYAQE5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 11:01:30 2025 by rpki-client